web.production.forum-communications.brightspot.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:f8:15:5e:80:55:e2:43:b8:2e:84:25:64:e3:c7:e7 was issued on by Amazon.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.production.forum-communications.brightspot.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f8:15:5e:80:55:e2:43:b8:2e:84:25:64:e3:c7:e7
Serial Number (int): 21226542975457236827187389882289080295
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bc:53:ef:58:00:b3:6a:ff:8c:d4:0d:6f:af:6e:98:68:26:6e:b9:50
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f5:ef:17:3a:2b:48:5e:3d:49:4b:99:60:11:46:d6:ae:30:f1:c2:b0
Fingerprint (sha256): e1:54:2c:f3:73:f3:b2:c9:05:db:84:e4:82:52:7d:33:4a:65:76:1a:64:e3:fe:97:cf:19:ec:aa:e0:4f:92:46

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate web.production.forum-communications.brightspot.cloud

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.production.forum-communications.brightspot.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.production.forum-communications.brightspot.cloud
www.pineandlakes.com
www.superiortelegram.com
www.grandforksherald.com
www.postbulletin.com
perhamfocus.com
echopress.com
www.dglobe.com
postbulletin.com
www.dl-online.com
www.brainerddispatch.com
thedickinsonpress.com
www.echopress.com
dl-online.com
pineandlakes.com
www.wctrib.com
superiortelegram.com
brainerddispatch.com
www.mitchellrepublic.com
www.pinejournal.com
*.web.production.forum-communications.brightspot.cloud
www.bemidjipioneer.com
therinklive.com
agweek.com
www.duluthnewstribune.com
fccnn.com
www.parkrapidsenterprise.com
www.wadenapj.com
wctrib.com
www.inforum.com
inforum.com
www.therinklive.com
duluthnewstribune.com
dglobe.com
jamestownsun.com
pinejournal.com
parkrapidsenterprise.com
bemidjipioneer.com
www.fccnn.com
www.agweek.com
www.perhamfocus.com
www.jamestownsun.com
mitchellrepublic.com
www.thedickinsonpress.com
grandforksherald.com
wadenapj.com

Other certificates including the domain name brightspot.cloud

(limited to 100 certificates)
cst-qa.lower.chorus.brightspot.cloud
origin.ser.production.k1.amazon.brightspot.cloud
origin.afar-media.production.k3.m1.brightspot.cloud
church-qa3.church.lower.church.brightspot.cloud
origin.uat.lower.google-marketing.brightspot.cloud
entertainment.production.k1.amazon.brightspot.cloud
origin.relay-qa.lower.k1.amazon.brightspot.cloud
biospace-qa.lower.k1.m1.brightspot.cloud
origin.kpbs.kpbs.production.k3.m1.brightspot.cloud
cms.6amcity.com
origin.pitchbook-prod.production.k2.m1.brightspot.cloud
acertus-uat.lower.k1.m1.brightspot.cloud
origin.wwe-uat.lower.k2.m1.brightspot.cloud
origin.biospace-qa.lower.k1.m1.brightspot.cloud
origin.ajga-uat.ajga.lower.k1.m1.brightspot.cloud
amazon-hvh.lower.k3.m1.brightspot.cloud
static.amazon-hvh.lower.k3.m1.brightspot.cloud
origin.acertus.production.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
aarp-content-uat2.aarp.lower.k1.m1.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
tvnotas.production.k3.m1.brightspot.cloud
intsys-qa.inter-systems.lower.k2.m1.brightspot.cloud
origin.medtech.production.jnj.brightspot.cloud
origin.web.production.hca.brightspot.cloud
intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.wwe-prod.production.k2.m1.brightspot.cloud
origin.jobs.production.amazon-jobs.brightspot.cloud
origin.berlin-2023-qa.berlin-2023.lower.k2.m1.brightspot.cloud
www.nbcsportsathletedirect.com
static.church-qa.church.lower.church.brightspot.cloud
origin.epe-uat.epe.lower.k2.m1.brightspot.cloud
lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.pitchbook-uat.lower.k2.m1.brightspot.cloud
origin.in-investor-uat.lower.k2.m1.brightspot.cloud
origin.getgo-qa.lower.k2.m1.brightspot.cloud
ensign-qa.ensign.lower.church.brightspot.cloud
fastmarkets.com
origin.deseret.production.chorus.brightspot.cloud
static.lexipol.lower.k1.m1.brightspot.cloud
origin.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.bwater-uat.bridgewater.lower.k2.m1.brightspot.cloud
static.farm-journal-qa.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.web.production.teaching-strategies.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.church-uat.church.lower.church.brightspot.cloud
amazon-last-mile.lower.k3.m1.brightspot.cloud
church-qa4.church.lower.church.brightspot.cloud
origin.pay-uat.lower.k1.amazon.brightspot.cloud
origin.vpm.production.k1.m1.brightspot.cloud
origin.foods.wholefoods.production.k1.amazon.brightspot.cloud
aarp-content-uat.aarp.lower.k1.m1.brightspot.cloud
static.biospace.production.k1.m1.brightspot.cloud
epe-qa.epe.lower.k2.m1.brightspot.cloud
bsp.elpais.com.uy
origin.vpm.production.k1.m1.brightspot.cloud
origin.carrick.production.k1.m1.brightspot.cloud
cms.6amcity.com
static.timothy-shriver-prod.production.k1.m1.brightspot.cloud
origin.chalkbeat.production.chorus.brightspot.cloud
origin.berlin-2023.berlin-2023.production.k2.m1.brightspot.cloud
static.prod-wires.production.ap.brightspot.cloud
origin.music2-qa.lower.k1.amazon.brightspot.cloud
kpbs-qa.kpbs.lower.k3.m1.brightspot.cloud
acertus-qa.lower.k1.m1.brightspot.cloud
cms.6amcity.com
cms.6amcity.com
origin.marriott-news.production.k1.m1.brightspot.cloud
origin.ei.energy-intelligence.production.k1.m1.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
static.uat.lower.dispatch-health.brightspot.cloud
entertainment-uat.lower.k1.amazon.brightspot.cloud
erepublic-qa2.erepublic.lower.k3.m1.brightspot.cloud
lexipol.production.k1.m1.brightspot.cloud
qa2.lower.forum-communications.brightspot.cloud
*.dispatchhealth.com
origin.chopra.chopra.production.k2.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.qa.lower.grove2.brightspot.cloud
static.uat.lower.amazon-sell.brightspot.cloud
origin.kpbs-uat.kpbs.lower.k3.m1.brightspot.cloud
static.notmusa.production.k3.m1.brightspot.cloud
static.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
science-qa2.topics.lower.k1.amazon.brightspot.cloud
origin.im-qa.lower.jnj.brightspot.cloud
aarp-content.aarp.production.k1.m1.brightspot.cloud
origin.uat.lower.dispatch-health.brightspot.cloud
sixam-city-uat.lower.k1.m1.brightspot.cloud
ooc.jnj-migrated.production.jnj.brightspot.cloud
origin.csx-qa.lower.k2.m1.brightspot.cloud
origin.jnj-uat.lower.jnj.brightspot.cloud
origin.rfdtv.k1.go.brightspot.cloud
static.web.production.forum-communications.brightspot.cloud
origin.music2-uat.lower.k1.amazon.brightspot.cloud
static.gbh.production.k1.m1.brightspot.cloud
origin.aji.production.k2.m1.brightspot.cloud

Certificate

The complete raw certificate details for web.production.forum-communications.brightspot.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLE89eshhO+QJUgUjcnW
l7UyUlJ8eksRsGd6jGiBSJMEzb48i2rWNqcQA8heJeVw39grHXKFDIVoTvjZ2jjr
kR9ItAvmWdBzOtrewCJqzpgw1sdic6otLOViBs5GtpQQOu/C/+apr6ZEXnreEUf1
AgfEmwiqyzFWQnkuUJh5xJB3D1T21P5FTM25m8z9Prx5xlTsf41ulxpqFfv4mH24
XdB68P/aFlMfqpoHXvnMzMl24WJBUI6RtB7Aq2978dD34Z7HlQni2zDN+E5V7bMC
vbTpSPf4Cu255NOeGGkK/PtkIYXL2ksttl/sEFSlJn2N2Byewxe7751MBkwNixOi
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21226542975457236827187389882289080295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.production.forum-communications.brightspot.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22305341052075668795466293500494876811063797302173698961247470710373239002018778501943399871059210830025881543584314580869721975227263800605371078556141558614863162458965794236813480173539313008041232179751064765684644893967844219140058718833708783002255863170952682799446988291424049545324722132663235824606994922472085500193527248395130004902444628028549193690980518803117545114608107070687266870944259167671045381787568672604029484452451829132169076935018437100291026742808177014908915237674898285649278792462851404404231669650760040131546522680357209327625041752834638853583500979436270062008409493038724080181773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc53ef5800b36aff8cd40d6faf6e9868266eb950
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (980 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.production.forum-communications.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.production.forum-communications.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therinklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therinklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fccnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wadenapj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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